$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft File: G6b_I23_7pYJaapF2ZXZb-TSmPE.mft (raw, json) Hash identifier: SCfFj3o+RCH45+ndluIo5huyUvYfb6Qt5wObsdoNnYs= Subject key identifier: C9:92:AF:21:52:AC:7A:9D:C5:D4:E9:E2:81:B3:8E:FA:7C:95:61:15 Authority key identifier: 1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1 Certificate issuer: /CN=A9194AE2/serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft Manifest number: 38 Signing time: Wed 23 Oct 2024 06:10:21 +0000 Manifest this update: Wed 23 Oct 2024 06:10:20 +0000 Manifest next update: Wed 30 Oct 2024 06:10:20 +0000 Files and hashes: 1: G6b_I23_7pYJaapF2ZXZb-TSmPE.crl (hash: vU8pWFmJvEcV1qmW15eujv5oDv1CocgMrhUSe3c+W9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.crl rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AE2/serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1 Validity Not Before: Oct 23 06:10:20 2024 GMT Not After : Oct 30 06:10:20 2024 GMT Subject: CN=6718934d-3ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:ff:09:c9:27:f3:ac:e8:bc:20:92:02:53: 40:b7:1d:ec:6e:99:8e:fb:dd:83:b8:71:ee:af:11: 25:a4:4a:b4:fe:b1:17:8e:d1:49:2e:d0:73:49:de: 86:53:63:b0:2d:75:5d:e5:5f:12:2a:d9:84:b4:fd: f4:de:ad:a5:d0:5b:a7:e5:de:25:f4:70:c3:a5:40: c3:de:92:cf:43:e6:e3:49:7c:dc:cf:4e:5c:9f:88: b4:09:30:98:83:df:45:51:1c:61:4f:60:79:86:a7: 30:3f:07:a8:6b:3b:2e:eb:da:b6:fc:ea:82:69:44: d7:74:26:2d:3c:a0:23:95:a9:ca:ba:22:f4:d2:ab: 22:7d:af:c5:12:f1:bd:4e:03:9f:15:3b:fc:11:84: 6d:4f:1c:3a:cb:95:23:ef:9f:74:a7:5d:bd:3e:58: 5d:96:62:e9:8b:40:2d:bf:10:e7:33:a5:9e:f3:bc: 55:44:74:0a:16:05:6e:91:17:b5:30:33:aa:e7:19: b7:ec:25:40:f0:ae:62:9b:0e:28:28:15:78:1c:ba: f9:84:bf:4c:5b:e9:83:c7:38:f8:b7:4f:8d:52:23: 8a:4e:01:94:81:fb:30:7c:03:43:f7:d2:2e:bf:98: f5:a2:a3:b2:d9:16:b6:19:6f:1a:aa:23:ce:5e:64: 38:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:92:AF:21:52:AC:7A:9D:C5:D4:E9:E2:81:B3:8E:FA:7C:95:61:15 X509v3 Authority Key Identifier: keyid:1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:2b:f4:5d:a1:b9:e6:cf:1d:40:6b:00:b7:f5:37:82:fd:09: 40:14:2b:a8:11:8f:62:21:bd:8c:c3:71:b1:e7:2e:ab:1f:02: 42:a4:1a:7f:cf:51:e8:18:08:c5:a8:92:e2:97:dc:47:af:5d: fb:34:bc:dc:84:14:6e:ca:77:a6:a1:83:c0:76:a0:77:14:7e: 5e:46:4a:90:28:48:50:2e:50:56:7c:58:c8:e2:16:f5:86:fe: 7a:61:2c:3b:99:d2:37:6c:da:7f:58:25:fe:b0:1e:8c:76:ba: c0:c0:85:7c:51:d9:43:ac:1f:a2:ea:f9:59:fb:a5:39:83:82: 47:38:d2:d6:4c:d8:94:b8:21:3c:b7:f4:ca:fe:70:17:b9:8d: cf:0f:d1:fc:42:25:2d:0c:54:d5:70:df:54:5f:60:5a:66:c5: 35:7f:11:58:fe:ee:19:93:c2:2a:4b:9e:d5:ab:ae:e8:10:d2: 3c:34:46:a8:a0:82:d6:66:8e:c6:5f:9e:fb:9b:93:64:16:72: 2a:a4:7b:4e:ef:77:9a:85:7a:90:1a:39:8e:d0:c5:c7:27:d7: 03:d9:e3:fe:81:d5:b1:ae:02:23:91:a8:19:0b:7c:8d:b9:cf: 4e:bb:c4:f3:1d:85:1a:31:6e:5d:2e:75:81:cc:4d:85:6d:2c: 80:09:3b:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NEFFMjExMC8GA1UEBRMoMUJBNkZGMjM2REZGRUU5NjA5NjlBQTQ1RDk5NUQ5NkZF NEQyOThGMTAeFw0yNDEwMjMwNjEwMjBaFw0yNDEwMzAwNjEwMjBaMBgxFjAUBgNV BAMTDTY3MTg5MzRkLTNlZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKEP8JySfzrOi8IJICU0C3HexumY773YO4ce6vESWkSrT+sReO0Uku0HNJ3oZT Y7AtdV3lXxIq2YS0/fTeraXQW6fl3iX0cMOlQMPeks9D5uNJfNzPTlyfiLQJMJiD 30VRHGFPYHmGpzA/B6hrOy7r2rb86oJpRNd0Ji08oCOVqcq6IvTSqyJ9r8US8b1O A58VO/wRhG1PHDrLlSPvn3SnXb0+WF2WYumLQC2/EOczpZ7zvFVEdAoWBW6RF7Uw M6rnGbfsJUDwrmKbDigoFXgcuvmEv0xb6YPHOPi3T41SI4pOAZSB+zB8A0P30i6/ mPWio7LZFrYZbxqqI85eZDgXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyZKvIVKs ep3F1OnigbOO+nyVYRUwHwYDVR0jBBgwFoAUG6b/I23/7pYJaapF2ZXZb+TSmPEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0QUUyLzJGMDNGNTdDM0JB QzExRUY5RDdFQTg3MUM0RjlBRTAyL0c2Yl9JMjNfN3BZSmFhcEYyWlhaYi1UU21Q RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRzZiX0kyM183cFlKYWFwRjJaWFpiLVRTbVBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 QUUyLzJGMDNGNTdDM0JBQzExRUY5RDdFQTg3MUM0RjlBRTAyL0c2Yl9JMjNfN3BZ SmFhcEYyWlhaYi1UU21QRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALAr9F2huebPHUBrALf1N4L9CUAUK6gRj2IhvYzDcbHnLqsfAkKkGn/P UegYCMWokuKX3EevXfs0vNyEFG7Kd6ahg8B2oHcUfl5GSpAoSFAuUFZ8WMjiFvWG /nphLDuZ0jds2n9YJf6wHox2usDAhXxR2UOsH6Lq+Vn7pTmDgkc40tZM2JS4ITy3 9Mr+cBe5jc8P0fxCJS0MVNVw31RfYFpmxTV/EVj+7hmTwipLntWrrugQ0jw0Rqig gtZmjsZfnvubk2QWciqke07vd5qFepAaOY7Qxccn1wPZ4/6B1bGuAiORqBkLfI25 z067xPMdhRoxbl0udYHMTYVtLIAJO3k= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:57 2024 by rpki-client on console-ams.rpki-client.org